The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.